Privacy Policy

How do we collect your information?

Most of the personal information we process is provided to us directly by you in relation to a legal claim or legal advice. We might collect this information from you in a number of ways, including via our website (e.g. our online enquiry form), over the telephone or via email. Depending on how you contact us, we may use one of our business partners to onboard you.

The personal information you supply to us may include:

• Your name, address, and contact details
• Date of birth
• Details of the circumstances of any claim or incident and any damage, injury or loss suffered by you
• National Insurance number
• Employment and GP details

We may also receive personal information indirectly, for example:

• By contacting third parties in connection with the services we provide to you, for example, medical or other experts
• If a claimant or a third party refers to you in correspondence or documentation relating to a legal claim
• From our suppliers, including introducers or referrers
• From public authorities, regulators or law enforcement bodies
• An employee of ours gives your contact details as an emergency contact or a referee

Your Rights

You have a number of legal rights over the personal information held by us:

• The right to access your personal information
• The right to correct or update any personal information
• The right to object to further processing
• The right to restrict the processing of your personal information
• The right to ask us to delete your personal information (please note we will only be able to accommodate this request where it is no longer necessary for the purpose(s) for which it was provided or where we no longer have a lawful basis to process your personal information)
• The right to receive the personal information we hold about you in a portable format, however this need only be provided in limited circumstances where the processing has been done by automated means

You can contact us should you wish to have access to this information or to update or complete any of our records pertaining to your personal information. Requests can be made in writing to our Data Protection Officer:

How we may use your personal information

We may use your personal information:

• To provide legal or other services
• To perform credit reference or other regulatory checks
• To engage the services of a third party (where instructed)
• For the purposes of operating our business (such as management information)
• To comply with legal and regulatory obligations
• To contact you in relation to customer surveys or market research
• To send you legal updates, or information in relation to products and services that may be of interest to you from MMA Legal or other members of the MMA Legal group of companies
• To understand and improve our marketing activity
• To improve client services through automated analysis and Artificial Intelligence (AI)

Sharing your personal information

We may need to communicate your personal information to other individuals or organisations to facilitate our legal services. For example:

1. Medical experts for the purpose of obtaining medical reports or acting as expert witnesses
2. Car rental companies for the purpose of obtaining a replacement car
3. Insurance underwriters for the purpose of assessing and validating your claim or to enable them to provide cover under an insurance policy such as legal expenses insurers
4. Insurance companies/brokers/third party introducers who referred your claim to us for the purpose of complying with our contractual obligations regarding details of the claim we process
5. Credit hire companies you may have contracted
6. Any employer who has paid sick pay which is to be recovered as part of your personal injury claim
7. Any supplier by virtue of whom you have been introduced to us (such as a Union) for management information purposes

Lawful Basis

The lawful basis on which we rely when processing your data is Article 6(1)(f) of the General Data Protection Regulation (GDPR), which allows us to process personal data for the purposes of the legitimate interests pursued either by us or by a third party.

From time to time, we might also rely on:

• Article 6(1)(a) - if we have obtained your consent (for example, when we require your consent for the optional cookies we use)
• Article 6(1)(c) - if we have a legal obligation to do so (for example, when we have a regulatory requirement to carry out checks regarding your identity)

Where we process special categories of personal information, we rely on Article 9(f) of the GDPR if the processing is in connection with a legal claim. At times, we may also rely on alternative legal bases for processing special category personal information, for example Article 9(b) if you are an employee or Article 9(2)(a) (explicit consent) when we collect and analyse voice recordings of customer calls.

Retention Periods

We will retain your personal information in accordance with applicable law. This is usually in accordance with the statutory limitation period. If you contact us but don't proceed with a claim, we may retain your personal information for a short period to ensure we can effectively track and monitor attempted fraud and to help us differentiate between service and new enquiry calls.

Automated Decision-Making

We may use the personal information you provide to carry out an automated decision making process as to the validity of your identity, as well as to carry out other checks as required by law and regulation (for example, a credit history check or the applicability of any sanctions). If a query arises in relation to any of these checks (i.e. if your identity cannot be validated or other checks raise issues that might prevent the continuance of our legal services to you), a human-led forensic analysis will be undertaken and any decision on our part not to act on your behalf will not be solely automated.

Changes to this Privacy Notice

We may amend this policy at any time by either notifying you or posting a revised version on our website. If we make a change to this policy, we will take your continued use of our services after that date as your acceptance of the change.